openssl icon indicating copy to clipboard operation
openssl copied to clipboard

cannot locate symbol sk_num

Open ufobat opened this issue 5 years ago • 8 comments

martin@sinclair:~/repos$ zef install OpenSSL
===> Searching for: OpenSSL
===> Testing: OpenSSL:ver<0.1.21>:auth<github:sergot>
# NETWORK_TESTING was not set
Cannot locate symbol 'sk_num' in native library 'libssl.so'
  in method setup at /home/martin/.rakudobrew/moar-2018.12/install/share/perl6/sources/947BDAB9F96E0E5FCCB383124F923A6BF6F8D76B (NativeCall) line 283
  in method CALL-ME at /home/martin/.rakudobrew/moar-2018.12/install/share/perl6/sources/947BDAB9F96E0E5FCCB383124F923A6BF6F8D76B (NativeCall) line 570
  in block <unit> at t/10-client-ca-file.t line 10

# Looks like you planned 7 tests, but ran 1
# NETWORK_TESTING was not set
===> Testing [FAIL]: OpenSSL:ver<0.1.21>:auth<github:sergot>
Aborting due to test failure: OpenSSL:ver<0.1.21>:auth<github:sergot> (use --force-test to override)
martin@sinclair:~/repos$

ufobat avatar Dec 24 '18 12:12 ufobat

has anyone investigated this issue?

vendethiel avatar Feb 18 '19 14:02 vendethiel

Yes, this is a repeat of jnthn/p6-io-socket-async-ssl/#34. Unfortunately, this is going to become more common, since libssl1.0 has now been removed from the latest KUbuntu. Here's the workaround:

  • Download libssl1.0 from here
  • Install it via sudo dpkg -i libssl1.0.0_1.0.2n-1ubuntu5.3_amd64.deb
  • Download libssl1.0-dev from here
  • Install if via sudo dpkg -i --force-all http://ftp.br.debian.org/debian/pool/main/o/openssl1.0/libssl1.0-dev_1.0.2r-1~deb9u1_amd64.deb
  • You will then have to handle the symbolic link, manually: cd /usr/lib/x86_64-linux-gnu; sudo ln -sf libssl.so.1.0.0 libssl.so

You should now be able to install this module without errors.

Xliff avatar Aug 04 '19 13:08 Xliff

OpenSSL 1.1.1 is quite common in the newest Linux distributions. I'm getting painted into a corner due to this issue in some cases: RHEL 8, CentOS 8, Oracle Linux 8, Fedora 31, etc.

It won't be realistic to down-rev OpenSSL in our case, so I hope that work will continue to overcome this issue.

markldevine avatar Oct 31 '19 15:10 markldevine

Indeed. The libssl1.0-dev package has even been removed from Ubuntu 19.10. Seems safer to require the newer OpenSSL symbols than the older ones at this point.

rbt avatar Nov 25 '19 19:11 rbt

Is @sergot active?

Xliff avatar Nov 25 '19 21:11 Xliff

Unfortunately I'm not that active anymore @Xliff , will try to find some time this week.

sergot avatar Dec 18 '19 09:12 sergot

~Just saw this on fedora 32, OpenSSL 1.1.1g FIPS, BUT...~

~If I clone the repo and zef install ., it installs just fine. If I do zef install OpenSSL without a local copy, it fails with sk_num not being found, which is rather odd.~

Could not confirm with a clean installation.

Altai-man avatar Jul 15 '20 19:07 Altai-man

I think this problem should no longer happen. At least I was able to install OpenSSL on Debian 10 and Ubuntu 20.04.2 LTS (both coming with OpenSSL 1.1.1).

If I'm not mistaken, the following changes made things work:

  • https://github.com/sergot/openssl/pull/65
  • the work from @ugexe for https://github.com/sergot/openssl/issues/82 (which removed stale precomp files)

Please note: The second change was only necessary if the libssl.so was not already present when attempting to install OpenSSL the first time.

However, I think (hope) that this issue could be closed now. It would be great if someone else double checks.

usev6 avatar Jul 18 '21 15:07 usev6